Is sigstore safe?
Review sigstore security risks.

Nudge Security provides security profiles for thousands of SaaS apps, including sigstore. This public profile has the basics you’ll need for a vendor risk assessment. For more details on sigstore, including breach history, start a free trial of Nudge Security.
sigstore Security Profile

CATEGORY

Security

Organization Details

What is

sigstore

?

sign. verify. protect. Make sure your software is what it claims to be.

HEADQUARTERS

HOSTING

HOSTING LOCATION

Who's Using sigstore in your org?

Nudge Security discovers every user for every SaaS app within minutes of starting a free trial. No credit card required.

Learn how

Security Program

SECURITY CERTIFICATIONS

SOC2 Compliance
PCI Compliant
HIPAA Compliant
SOC2 Compliance
SOC 2 Compliant
GDPR Compliant
ISO 27001 Compliant
FedRamp Compliant
CSA Star Level 1
Compliant

SECURITY PORTAL

BUG BOUNTY

VULNERABILITY DISCLOSURE

TERMS OF SERVICE

PRIVACY POLICY

sigstore breach history
Has sigstore experienced a recent breach? Start a free trial of Nudge Security for a full breach history and more security program details.
Learn more

Authentication

AUTHENTICATION / SSO

Supported Okta Features
Login with Google support
Login with Microsoft support
Supports SSO
Two-factor authentication via SMS
Two-factor authentication via E-mail
Two-factor authentication via Hardware
Two-factor authentication via Software
Two-factor authentication via TOTP
Two-factor authentication via U2F

oauth details

sigstore OAuth Grants
Is sigstore connected to your other business apps? Start a free trial of Nudge Security to see all app-to-app OAuth grants.
Learn more

Supply Chain

Apps in sigstore's supply chain
  • Netlify
  • Better Uptime
  • GitHub
  • Google Workspace
  • Sonatype
  • Google Analytics
sigstore supply chain breach history
What's in sigstore's SaaS supply chain? Start a free trial of Nudge Security to manage software supply chain security at scale.
Learn more

Subdomains

sigstore subdomains
  • docs.sigstore.dev
  • search.sigstore.dev
  • status.sigstore.dev
  • www.sigstore.dev
  • blog.sigstore.dev

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.